CVE-2024-8474

🗓️ 06 Jan 2025 14:33:26Reported by OpenVPNType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 138 Views

OpenVPN Connect pre-3.5.0 logs private key, allowing unauthorized decryption of VPN traffic.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-8474	6 Jan 202514:37	–	circl
CNNVD	OpenVPN Connect 安全漏洞	6 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-8474	6 Jan 202514:33	–	cvelist
NVD	CVE-2024-8474	6 Jan 202515:15	–	nvd
Positive Technologies	PT-2025-1013 · Openvpn · Openvpn Connect	6 Jan 202500:00	–	ptsecurity
Positive Technologies	PT-2025-3699 · Undefined · Undefined	10 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-8474	23 May 202507:20	–	redhatcve
The Hacker News	⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]	13 Jan 202512:05	–	thn
Vulnrichment	CVE-2024-8474	6 Jan 202514:33	–	vulnrichment

NVD

Node

openvpn connectRange<3.5.0android

[
  {
    "vendor": "OpenVPN",
    "product": "OpenVPN Connect",
    "platforms": [
      "Android"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "3.5.0",
        "versionType": "all releases"
      }
    ],
    "defaultStatus": "unaffected"
  }
]